$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer (raw, json) Hash identifier: KeZXASmtkr09OdFQMBAZvcRoLn6LQyqSgMcOAHUtqAw= Subject key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 75AE7AD18614715DAC081BDB28C2492F61C8E335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft caRepository: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 May 2024 07:33:41 +0000 Certificate not after: Tue 20 May 2025 07:38:41 +0000 Subordinate resources: IP: 103.60.88.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Jun 2024 03:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ae:7a:d1:86:14:71:5d:ac:08:1b:db:28:c2:49:2f:61:c8:e3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 07:33:41 2024 GMT Not After : May 20 07:38:41 2025 GMT Subject: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:bc:d7:cf:d9:eb:88:25:a4:ff:5a:d2:63: 3a:2b:ef:f7:13:0c:af:ad:27:06:4e:3d:eb:6b:f9: d9:bc:55:33:1d:d7:da:59:8b:98:5a:e1:3c:62:46: 27:6c:6f:56:d1:c3:0f:86:e6:c0:d9:8d:d6:79:09: a6:8e:fc:82:c1:d6:26:40:08:5b:95:51:6a:3e:5c: 27:08:8b:c4:b7:9e:94:47:2f:77:9f:8f:07:b3:bf: d8:5f:77:ed:98:50:72:a0:04:45:e1:a0:8f:ac:5c: 62:e5:90:10:31:cc:dc:d7:6d:6e:fb:09:cb:de:75: 40:55:8b:fd:dc:c7:d5:44:8e:3a:ff:a5:b8:bb:30: 3c:10:87:81:d6:0c:30:65:ab:61:8a:48:38:15:f7: 08:fe:2c:16:ee:d9:c0:56:aa:ec:77:73:12:c7:04: db:75:e9:7d:e3:20:dc:08:50:bb:ec:29:80:f6:73: 7f:59:e6:4c:db:2d:7b:bc:f6:b3:73:2c:55:5f:7e: 05:d7:29:ac:2a:8d:f9:3a:aa:8f:12:ba:e0:1b:2c: 80:49:75:62:b3:97:c6:43:98:da:1a:10:53:b2:6d: e3:b4:be:d7:5e:a7:dc:92:84:12:98:b3:66:6f:1a: 33:35:1c:74:c6:64:76:43:50:43:be:10:c3:29:f6: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.88.0/23 Signature Algorithm: sha256WithRSAEncryption 05:d6:9a:d0:f3:92:35:2a:e8:28:57:d0:15:d4:d9:0f:8c:64: f6:b2:70:50:a9:4d:a6:cc:bd:6c:32:47:e9:3c:da:f1:19:c9: 54:8b:26:21:01:26:3a:17:fd:7b:48:d2:cc:28:d4:22:dd:49: e3:1a:98:25:4a:2b:ab:b3:e4:be:af:eb:b7:96:98:aa:79:d5: 95:44:57:f2:e3:ae:52:78:94:80:73:7f:2d:8f:f5:34:a6:9c: 1e:6c:85:69:69:11:d9:4d:a0:2e:a2:0b:0e:5f:50:53:cc:eb: b2:01:1a:b9:2e:49:a3:d3:e4:95:a1:74:f2:76:47:be:43:e8: 4a:81:2f:11:be:02:4c:de:86:2a:3e:c9:85:ef:0c:50:e0:4d: 65:cf:80:87:55:4a:a0:18:0d:0f:81:20:67:96:bc:ce:db:2a: 71:81:20:e6:13:d3:48:77:32:c2:8c:30:49:e7:e3:69:10:f0: 08:d8:91:1b:cd:cf:d9:cb:02:63:db:e1:f2:1b:f5:f3:b9:7d: 53:10:ed:9b:90:d9:41:4b:af:d6:75:ea:2f:d5:db:be:1e:04: 54:a3:40:ca:04:8b:9a:b5:79:eb:32:af:97:eb:c7:48:62:b2: 69:a8:7d:b0:bf:97:76:30:47:46:64:c3:e7:ef:27:1c:ed:b7: 9f:0c:f3:18 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUda560YYUcV2sCBvbKMJJL2HI4zUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUyMTA3MzM0MVoX DTI1MDUyMDA3Mzg0MVowMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdE NkZFNkRCRDZBNEZFODIxMkRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAsvNfP2euIJaT/WtJjOivv9xMMr60nBk4962v52bxVMx3X2lmLmFrhPGJG J2xvVtHDD4bmwNmN1nkJpo78gsHWJkAIW5VRaj5cJwiLxLeelEcvd5+PB7O/2F93 7ZhQcqAEReGgj6xcYuWQEDHM3NdtbvsJy951QFWL/dzH1USOOv+luLswPBCHgdYM MGWrYYpIOBX3CP4sFu7ZwFaq7HdzEscE23XpfeMg3AhQu+wpgPZzf1nmTNste7z2 s3MsVV9+BdcprCqN+TqqjxK64BssgEl1YrOXxkOY2hoQU7Jt47S+116n3JKEEpiz Zm8aMzUcdMZkdkNQQ74Qwyn23l0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOfJ5OXI6pifD/fW/m29ak/oIS3eMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTFhYTQ2 LWYyOGUtNGM1NS1iOWJhLTdkNWJkYzk1YjRmNi8wL0U3QzlFNEU1QzhFQTk4OUYw RkY3RDZGRTZEQkQ2QTRGRTgyMTJEREUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnPFgwDQYJKoZIhvcNAQELBQADggEBAAXWmtDzkjUq6ChX0BXU2Q+MZPaycFCp TabMvWwyR+k82vEZyVSLJiEBJjoX/XtI0swo1CLdSeMamCVKK6uz5L6v67eWmKp5 1ZVEV/LjrlJ4lIBzfy2P9TSmnB5shWlpEdlNoC6iCw5fUFPM67IBGrkuSaPT5JWh dPJ2R75D6EqBLxG+Akzehio+yYXvDFDgTWXPgIdVSqAYDQ+BIGeWvM7bKnGBIOYT 00h3MsKMMEnn42kQ8AjYkRvNz9nLAmPb4fIb9fO5fVMQ7ZuQ2UFLr9Z16i/V274e BFSjQMoEi5q1eesyr5frx0hismmofbC/l3YwR0Zkw+fvJxztt58M8xg= -----END CERTIFICATE-----Generated at Sun Jun 23 00:04:08 2024 by rpki-client on console-ams.rpki-client.org